University of Michigan

The University of North Carolina at Chapel Hill

Michael Donald Bailey

Phillip Andrew Porras

Fabian Newman Monrose

Srinivas Krishnan

Andrew Maxwell White

Mingyan Liu

Manish Karir

Jing Zhang

Zakir Durumeric

Methods, systems, and computer readable media for rapid filtering of opaque data traffic are disclosed. According to one method, the method includes receiving a packet containing a payload. The method also includes analyzing a portion of the payload for determining whether the packet contains compressed or encrypted data. The method further includes performing, if the packet contains compressed or encrypted data, at least one of sending the packet to an opaque traffic analysis engine for analysis, discarding the packet, logging the packet, or marking the packet.

Methods, systems, and computer readable media for rapid filtering of opaque data traffic

Network security and robustness is analyzed by developing correlations among network maliciousness observations to determine attack susceptibility. Network traffic is analyzed at the autonomous system (AS) level, among connected Internet Protocol (IP) routing prefixes, to identify these observations. The traffic is monitored for any of a number of specified mismanagement metrics. Correlations among these metrics are determined and a unified network mismanagement metric is developed, indicating network susceptibility to potentially malicious attack.

Network maliciousness susceptibility analysis and rating

Growing community of inventors

Ypsilanti, MI, United States of America

Michael Donald Bailey